Virus Warning!!!

**nwabri** · 01-27-2004, 11:25 AM

There is another one.

There is a e-mail virus spreading again. And I know that somehow my flightsim.com e-mail address is sending infected e-mails out. If you get a simple e-mail that just says "Hi" in the title, or has an attachment with the same title, do not open it, delete it. I did not send it, and I have no clue how it is coming from my e-mail.

**Jeff S KDTW** · 01-27-2004, 11:44 AM

Our office got his HARD yesterday afternoon with this virus. Oftentimes it includes an attachment, which can be a zip, etc.

**Jeff S KDTW** · 01-27-2004, 11:45 AM

I've seen the subject read "Hi", "Hello", and "Test".

**Flying_Turnip** · 01-27-2004, 02:07 PM

Me too, I've had "Mail Delivery Error - Return to sender", "Test", "Hello", "SERVER REPORT", "RETURNED MAIL - See transcript for details"

Timeless Tip: NEVER OPEN A FILE UNLESS YOU KNOW EXACTLY WHAT IT IS AND WHERE IT CAME FROM!

Viruses like this slow down the whole internet so do us all a favour and follow the advice above :)

[link:www.ricks-ppl.tk | http://www.x-plane.org/users/flyingt...forum_sig.jpg]
Flying is learning to throw yourself at the ground, and miss
[link:www.flightsim.com/cgi/dcforum/dcboard.cgi?az=list&forum=DCForumID24 | Lomac Forum] Moderator
Flying_turnip@ntlworld.com

**Trev** · 01-27-2004, 02:27 PM

Get a programe called mailwasher. How it works, it allow's you to read the header and address of your emails directly from your ISP's server without the email getting onto your computer, and if you don't like it you can bounce it back to sender.

http://www.mailwasher.net/

Trevor:)

**Leesw** · 01-27-2004, 04:41 PM

Don't 'bounce' a virus email back to the sender. All email viruses these days spoof the sender's address so you are just forwarding the virus on to someone who probably doesn't yet have it, and at the very least you are wasting bandwidth.

What is almost as bad as the viruses themselves are all the miserable antiquated virus filters out there that send a message to the 'sender' telling him he has a virus (when he doesn't). I have to discard as many of those false reports as I do virus messages. There are also probably a lot of inexperienced users who receive these false reports and are then afraid to use their systems even though they are clean.

I wish that these email viruses would do real damage to the recipient's system instead of just wasting time and bandwidth. Then all the morons who can't be bothered to protect themselves against viruses would soon smarten up and it would put an end to this nonsense.

**rcbarend** · 01-27-2004, 05:37 PM

>Then all the morons who can't be bothered to
>protect themselves against viruses would soon smarten up and
>it would put an end to this nonsense.

Agreed 100% ...
So to the virus/worm makers out there: if you DO need to behave like lunatics, please do it properly !!!

Rob

**CapMason** · 01-27-2004, 09:39 PM

Brian, and all flightsimmmers, if you experienced what Brian did -- you may not actually have been infected. First of all, I did not receive any infected emails from you. Secondly, if you had your antivirus set for auto-update (both Norton and McAfee) you probably were already inoculated against Novarg.

What you saw was someone who was not protected and got stung. They had your email address in their address book. The virus then sent itself to you from there and spoofed our webmaster address. It is highly unlikely that you got it from the forums our our servers because we are extremely diligent about virus protection and member privacy. But, if NAV or McAfee was updated, it stripped out the virus attachment and you just opened the text version of the email. No problem, at least with this virus. As a safety precaution, I turn off my preview pane because many viruses, such as NIMDA, can infect just from being previewed.

Norton probably already did catch it. Check your quarantine report and you'll see a ton of Novarg files that have been quarantined. That's your indication that NAV did its job. You probably were not infected. But, just to be safe, you should run a virus scan and manually update your Live Update.